@nictool/dns-resource-record 1.2.0 → 1.2.2

package/rr/https.js

@@ -0,0 +1,62 @@
+import RR from '../rr.js'
+
+export default class HTTPS extends RR {
+  constructor(opts) {
+    super(opts)
+  }
+
+  /****** Resource record specific setters   *******/
+  setPriority(val) {
+    this.is16bitInt('HTTPS', 'priority', val)
+
+    this.set('priority', val)
+  }
+
+  setTargetName(val) {
+    // this.isFullyQualified('HTTPS', 'target name', val)
+    // this.isValidHostname('HTTPS', 'target name', val)
+
+    // RFC 4034: letters in the DNS names are lower cased
+    this.set('target name', val.toLowerCase())
+  }
+
+  setParams(val) {
+    // if (!val) this.throwHelp(`HTTPS: params is required`)
+
+    this.set('params', val)
+  }
+
+  getDescription() {
+    return 'HTTP Semantics'
+  }
+
+  getRdataFields(arg) {
+    return ['priority', 'target name', 'params']
+  }
+
+  getRFCs() {
+    return [9460]
+  }
+
+  getTypeId() {
+    return 65
+  }
+
+  /******  IMPORTERS   *******/
+
+  fromBind(opts) {
+    // test.example.com  3600  IN  HTTPS Priority TargetName Params
+    const [owner, ttl, c, type, pri, fqdn] = opts.bindline.split(/\s+/)
+    return new HTTPS({
+      owner,
+      ttl: parseInt(ttl, 10),
+      class: c,
+      type,
+      priority: parseInt(pri, 10),
+      'target name': fqdn,
+      params: opts.bindline.split(/\s+/).slice(6).join(' ').trim(),
+    })
+  }
+
+  /******  EXPORTERS   *******/
+}

package/rr/ipseckey.js

@@ -1,4 +1,4 @@
-import net from 'net'
+import net from 'node:net'
 
 import RR from '../rr.js'
 
@@ -20,23 +20,20 @@ export default class IPSECKEY extends RR {
   setGatewayType(val) {
     // 0 (none), 1 (4-byte IPv4), 2 (16-byte IPv6), 3 (wire encoded domain name)
     if (![0, 1, 2, 3].includes(val))
-      throw new Error(`IPSECKEY: Gateway Type is invalid, ${this.citeRFC()}`)
+      this.throwHelp(`IPSECKEY: Gateway Type is invalid`)
 
     this.set('gateway type', val)
   }
 
   setAlgorithm(val) {
     // unsigned int, 1 octet, values: 1=DSA, 2=RSA
-    if (![1, 2].includes(val))
-      throw new Error(`IPSECKEY: Algorithm invalid, ${this.citeRFC()}`)
+    if (![1, 2].includes(val)) this.throwHelp(`IPSECKEY: Algorithm invalid`)
 
     this.set('algorithm', val)
   }
 
   setGateway(val) {
-    const gwErr = new Error(
-      `IPSECKEY: gateway invalid (${val}), ${this.citeRFC()}`,
-    )
+    const gwErr = new Error(`IPSECKEY: gateway invalid (${val})`)
     switch (this.get('gateway type')) {
       case 0:
         if (val !== '.') throw gwErr
@@ -53,7 +50,7 @@ export default class IPSECKEY extends RR {
   }
 
   setPublickey(val) {
-    // if (val) throw new Error(`IPSECKEY: publickey is optional, ${this.citeRFC()}`)
+    // if (val) this.throwHelp(`IPSECKEY: publickey is optional`)
 
     this.set('publickey', val)
   }
@@ -74,6 +71,20 @@ export default class IPSECKEY extends RR {
     return 45
   }
 
+  getCanonical() {
+    return {
+      owner: '38.2.0.192.in-addr.arpa.',
+      ttl: 7200,
+      class: 'IN',
+      type: 'IPSECKEY',
+      precedence: 10,
+      'gateway type': 1,
+      algorithm: 2,
+      gateway: '192.0.2.38',
+      publickey: 'AQNRU3mG7TVTO2BkR47usntb102uFJtugbo6BSGvgqt4AQ==',
+    }
+  }
+
   /******  IMPORTERS   *******/
   fromBind(opts) {
     // FQDN TTL CLASS IPSECKEY Precedence GatewayType Algorithm Gateway PublicKey
@@ -94,7 +105,7 @@ export default class IPSECKEY extends RR {
 
   fromTinydns(opts) {
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 45) throw new Error('IPSECKEY fromTinydns, invalid n')
+    if (n != 45) this.throwHelp('IPSECKEY fromTinydns, invalid n')
 
     const precedence = TINYDNS.octalToUInt8(rdata.substring(0, 4))
     const gwType = TINYDNS.octalToUInt8(rdata.substring(4, 8))

package/rr/key.js

@@ -24,13 +24,13 @@ export default class KEY extends RR {
     // 1 octet
     // 1=RSA/MD5, 2=DH, 3=DSA/SHA-1, 4=EC, 5=RSA/SHA-1
     if (![1, 2, 3, 4, 5, 253, 254].includes(val))
-      throw new Error(`KEY: algorithm invalid, ${this.citeRFC()}`)
+      this.throwHelp(`KEY: algorithm invalid`)
 
     this.set('algorithm', val)
   }
 
   setPublickey(val) {
-    if (!val) throw new Error(`KEY: publickey is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`KEY: publickey is required`)
 
     this.set('publickey', val)
   }

package/rr/loc.js

@@ -20,7 +20,7 @@ export default class LOC extends RR {
 
   /****** Resource record specific setters   *******/
   setAddress(val) {
-    if (!val) throw new Error('LOC: address is required')
+    if (!val) this.throwHelp('LOC: address is required')
 
     /*
     ... LOC ( d1 [m1 [s1]] {"N"|"S"} d2 [m2 [s2]]
@@ -59,7 +59,7 @@ export default class LOC extends RR {
     // put them all together
     const locRe = new RegExp(`^${dms}(N|S)\\s+${dms}(E|W)\\s+${alt}`, 'i')
     const r = string.match(locRe)
-    if (!r) throw new Error('LOC address: invalid format, see RFC 1876')
+    if (!r) this.throwHelp('LOC address: invalid format, see RFC 1876')
 
     const loc = {
       latitude: {
@@ -89,7 +89,7 @@ export default class LOC extends RR {
   fromTinydns(opts) {
     // LOC via generic, :fqdn:n:rdata:ttl:timestamp:lo
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 29) throw new Error('LOC fromTinydns, invalid n')
+    if (n != 29) this.throwHelp('LOC fromTinydns, invalid n')
 
     // divide by 100 is to convert cm to meters
     const l = {
@@ -173,7 +173,7 @@ export default class LOC extends RR {
         hem = rawmsec >= REF.LATLON ? 'E' : 'W'
         break
       default:
-        throw new Error('unknown or missing hemisphere')
+        this.throwHelp('unknown or missing hemisphere')
     }
 
     return `${deg} ${min} ${sec}${msec ? '.' + msec : ''} ${hem}`

package/rr/mx.js

@@ -1,4 +1,4 @@
-import net from 'net'
+import net from 'node:net'
 
 import RR from '../rr.js'
 
@@ -10,15 +10,16 @@ export default class MX extends RR {
   /****** Resource record specific setters   *******/
   setPreference(val) {
     if (val === undefined) val = this?.default?.preference
+    if (val === undefined) this.throwHelp('MX: preference is required')
     this.is16bitInt('MX', 'preference', val)
     this.set('preference', val)
   }
 
   setExchange(val) {
-    if (!val) throw new Error('MX: exchange is required')
+    if (!val) this.throwHelp('MX: exchange is required')
 
     if (net.isIPv4(val) || net.isIPv6(val))
-      throw new Error(`MX: exchange must be a FQDN, ${this.citeRFC()}`)
+      this.throwHelp(`MX: exchange must be a FQDN`)
 
     this.isFullyQualified('MX', 'exchange', val)
     this.isValidHostname('MX', 'exchange', val)
@@ -43,6 +44,17 @@ export default class MX extends RR {
     return 15
   }
 
+  getCanonical() {
+    return {
+      owner: 'example.com.',
+      ttl: 43200,
+      class: 'IN',
+      type: 'MX',
+      preference: 0,
+      exchange: 'mail.example.com.',
+    }
+  }
+
   /******  IMPORTERS   *******/
   fromTinydns(opts) {
     // @fqdn:ip:x:dist:ttl:timestamp:lo

package/rr/naptr.js

@@ -41,7 +41,7 @@ export default class NAPTR extends RR {
 
   setFlags(val) {
     if (!['', 'S', 'A', 'U', 'P'].includes(val.toUpperCase()))
-      throw new Error(`NAPTR flags are invalid, ${this.citeRFC()}`)
+      this.throwHelp(`NAPTR flags are invalid`)
 
     this.set('flags', val.toUpperCase())
   }
@@ -62,7 +62,7 @@ export default class NAPTR extends RR {
   fromTinydns(opts) {
     // NAPTR via generic, :fqdn:n:rdata:ttl:timestamp:lo
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 35) throw new Error('NAPTR fromTinydns, invalid n')
+    if (n != 35) this.throwHelp('NAPTR fromTinydns, invalid n')
 
     const binRdata = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
 

package/rr/ns.js

@@ -8,7 +8,7 @@ export default class NS extends RR {
 
   /****** Resource record specific setters   *******/
   setDname(val) {
-    if (!val) throw new Error(`NS: dname is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NS: dname is required`)
 
     this.isFullyQualified('NS', 'dname', val)
     this.isValidHostname('NS', 'dname', val)

package/rr/nsec.js

@@ -8,8 +8,7 @@ export default class NSEC extends RR {
 
   /****** Resource record specific setters   *******/
   setNextDomain(val) {
-    if (!val)
-      throw new Error(`NSEC: 'next domain' is required:, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC: 'next domain' is required:`)
 
     this.isFullyQualified('NSEC', 'next domain', val)
     this.isValidHostname('NSEC', 'next domain', val)
@@ -19,8 +18,7 @@ export default class NSEC extends RR {
   }
 
   setTypeBitMaps(val) {
-    if (!val)
-      throw new Error(`NSEC: 'type bit maps' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC: 'type bit maps' is required`)
 
     this.set('type bit maps', val)
   }

package/rr/nsec3.js

@@ -12,8 +12,7 @@ export default class NSEC3 extends RR {
   setHashAlgorithm(val) {
     // Hash Algorithm is a single octet.
     // The Hash Algorithm field is represented as an unsigned decimal integer.
-    if (!val)
-      throw new Error(`NSEC3: 'hash algorithm' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3: 'hash algorithm' is required`)
 
     this.is8bitInt('NSEC3', 'hash algorithm', val)
 
@@ -22,7 +21,7 @@ export default class NSEC3 extends RR {
 
   setFlags(val) {
     // The Flags field is represented as an unsigned decimal integer.
-    if (!val) throw new Error(`NSEC3: 'flags' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3: 'flags' is required`)
 
     this.is8bitInt('NSEC3', 'flags', val)
 
@@ -31,8 +30,7 @@ export default class NSEC3 extends RR {
 
   setIterations(val) {
     // The Iterations field is represented as an unsigned decimal integer. 0-65535
-    if (!val)
-      throw new Error(`NSEC3: 'iterations' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3: 'iterations' is required`)
 
     this.is16bitInt('NSEC3', 'flags', val)
 
@@ -50,18 +48,14 @@ export default class NSEC3 extends RR {
   setNextHashedOwnerName(val) {
     // The Next Hashed Owner Name field is represented as an unpadded
     // sequence of case-insensitive base32 digits, without whitespace
-    if (!val)
-      throw new Error(
-        `NSEC3: 'next hashed owner name' is required, ${this.citeRFC()}`,
-      )
+    if (!val) this.throwHelp(`NSEC3: 'next hashed owner name' is required`)
 
     this.set('next hashed owner name', val)
   }
 
   setTypeBitMaps(val) {
     // The Type Bit Maps field is represented as a sequence of RR type mnemonics.
-    if (!val)
-      throw new Error(`NSEC3: 'type bit maps' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3: 'type bit maps' is required`)
 
     this.set('type bit maps', val)
   }
@@ -113,7 +107,7 @@ export default class NSEC3 extends RR {
 
   fromTinydns(opts) {
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 50) throw new Error('NSEC3 fromTinydns, invalid n')
+    if (n != 50) this.throwHelp('NSEC3 fromTinydns, invalid n')
 
     const bytes = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')
 

package/rr/nsec3param.js

@@ -7,13 +7,10 @@ export default class NSEC3PARAM extends RR {
   }
 
   /****** Resource record specific setters   *******/
-  setHashAlgoritm(val) {
+  setHashAlgorithm(val) {
     // Hash Algorithm is a single octet.
     // The Hash Algorithm field is represented as an unsigned decimal integer.
-    if (!val)
-      throw new Error(
-        `NSEC3PARAM: 'hash algorithm' is required, ${this.citeRFC()}`,
-      )
+    if (!val) this.throwHelp(`NSEC3PARAM: 'hash algorithm' is required`)
 
     this.is8bitInt('NSEC3PARAM', 'hash algorithm', val)
 
@@ -22,8 +19,7 @@ export default class NSEC3PARAM extends RR {
 
   setFlags(val) {
     // The Flags field is represented as an unsigned decimal integer.
-    if (!val)
-      throw new Error(`NSEC3PARAM: 'flags' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3PARAM: 'flags' is required`)
 
     this.is8bitInt('NSEC3PARAM', 'flags', val)
 
@@ -32,8 +28,7 @@ export default class NSEC3PARAM extends RR {
 
   setIterations(val) {
     // The Iterations field is represented as an unsigned decimal integer. 0-65535
-    if (!val)
-      throw new Error(`NSEC3PARAM: 'iterations' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NSEC3PARAM: 'iterations' is required`)
 
     this.is16bitInt('NSEC3PARAM', 'iterations', val)
 

package/rr/nxt.js

@@ -8,8 +8,7 @@ export default class NXT extends RR {
 
   /****** Resource record specific setters   *******/
   setNextDomain(val) {
-    if (!val)
-      throw new Error(`NXT: 'next domain' is required:, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NXT: 'next domain' is required`)
 
     this.isFullyQualified('NXT', 'next domain', val)
     this.isValidHostname('NXT', 'next domain', val)
@@ -19,8 +18,7 @@ export default class NXT extends RR {
   }
 
   setTypeBitMap(val) {
-    if (!val)
-      throw new Error(`NXT: 'type bit map' is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`NXT: 'type bit map' is required`)
 
     this.set('type bit map', val)
   }

package/rr/openpgpkey.js

@@ -27,15 +27,19 @@ export default class OPENPGPKEY extends RR {
   }
 
   /******  IMPORTERS   *******/
-  fromBind(str) {
+  fromBind(obj) {
     // test.example.com  3600  IN  OPENPGPKEY  <base64 public key>
-    const [owner, ttl, c, type, privatekey] = str.split(/\s+/)
+    // eslint-disable-next-line no-unused-vars
+    const [ignore, owner, ttl, c, type, publickey] = obj.bindline
+      .trim()
+      .match(/^([\S]+)\s+(\d{1,10})\s+(IN)\s+(OPENPGPKEY)\s+([\W\w]*)$/)
+
     return new OPENPGPKEY({
       owner,
       ttl: parseInt(ttl, 10),
       class: c,
       type: type,
-      'private key': privatekey,
+      'public key': publickey.trim(),
     })
   }
 

package/rr/rrsig.js

@@ -8,9 +8,8 @@ export default class RRSIG extends RR {
   /****** Resource record specific setters   *******/
   setTypeCovered(val) {
     // a 2 octet Type Covered field
-    if (!val) throw new Error(`RRSIG: 'type covered' is required`)
-    if (val.length > 2)
-      throw new Error(`RRSIG: 'type covered' is too long, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`RRSIG: 'type covered' is required`)
+    if (val.length > 2) this.throwHelp(`RRSIG: 'type covered' is too long`)
 
     this.set('type covered', val)
   }
@@ -19,7 +18,7 @@ export default class RRSIG extends RR {
     // a 1 octet Algorithm field
     // 1=RSA/MD5, 2=DH, 3=RRSIGA/SHA-1, 4=EC, 5=RSA/SHA-1
     if (![1, 2, 3, 4, 5, 253, 254].includes(val))
-      throw new Error(`RRSIG: algorithm invalid, ${this.citeRFC()}`)
+      this.throwHelp(`RRSIG: algorithm invalid`)
 
     this.set('algorithm', val)
   }

package/rr/sig.js

@@ -8,7 +8,7 @@ export default class SIG extends RR {
   /****** Resource record specific setters   *******/
   setTypeCovered(val) {
     // a 2 octet Type Covered field
-    if (!val) throw new Error(`SIG: 'type covered' is required`)
+    if (!val) this.throwHelp(`SIG: 'type covered' is required`)
 
     this.set('type covered', val)
   }

package/rr/smimea.js

@@ -8,21 +8,19 @@ export default class SMIMEA extends RR {
   /****** Resource record specific setters   *******/
   setCertificateUsage(val) {
     if (![0, 1, 2, 3].includes(val))
-      throw new Error(`SMIMEA: certificate usage invalid, ${this.citeRFC()}`)
+      this.throwHelp(`SMIMEA: certificate usage invalid`)
 
     this.set('certificate usage', val)
   }
 
   setSelector(val) {
-    if (![0, 1].includes(val))
-      throw new Error(`SMIMEA: selector invalid, ${this.citeRFC()}`)
+    if (![0, 1].includes(val)) this.throwHelp(`SMIMEA: selector invalid`)
 
     this.set('selector', val)
   }
 
   setMatchingType(val) {
-    if (![0, 1, 2].includes(val))
-      throw new Error(`SMIMEA: matching type, ${this.citeRFC()}`)
+    if (![0, 1, 2].includes(val)) this.throwHelp(`SMIMEA: matching type`)
 
     this.set('matching type', val)
   }

package/rr/soa.js

@@ -28,8 +28,7 @@ export default class SOA extends RR {
     // RNAME (email of admin)  (escape . with \)
     this.isValidHostname('SOA', 'RNAME', val)
     this.isFullyQualified('SOA', 'RNAME', val)
-    if (/@/.test(val))
-      throw new Error(`SOA rname replaces @ with a . (dot), ${this.citeRFC()}`)
+    if (/@/.test(val)) this.throwHelp(`SOA rname replaces @ with a . (dot)`)
 
     // RFC 4034: letters in the DNS names are lower cased
     this.set('rname', val.toLowerCase())

package/rr/spf.js

@@ -34,7 +34,7 @@ export default class SPF extends TXT {
   fromTinydns(opts) {
     // SPF via generic, :fqdn:n:rdata:ttl:timestamp:lo
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 99) throw new Error('SPF fromTinydns, invalid n')
+    if (n != 99) this.throwHelp('SPF fromTinydns, invalid n')
 
     return new SPF({
       type: 'SPF',

package/rr/srv.js

@@ -1,4 +1,4 @@
-import net from 'net'
+import net from 'node:net'
 
 import RR from '../rr.js'
 import * as TINYDNS from '../lib/tinydns.js'
@@ -28,10 +28,10 @@ export default class SRV extends RR {
   }
 
   setTarget(val) {
-    if (!val) throw new Error(`SRV: target is required, ${this.citeRFC()}`)
+    if (!val) this.throwHelp(`SRV: target is required`)
 
     if (net.isIPv4(val) || net.isIPv6(val))
-      throw new Error(`SRV: target must be a FQDN, ${this.citeRFC()}`)
+      this.throwHelp(`SRV: target must be a FQDN`)
 
     this.isFullyQualified('SRV', 'target', val)
     this.isValidHostname('SRV', 'target', val)
@@ -69,7 +69,7 @@ export default class SRV extends RR {
     } else {
       // tinydns generic record format
       ;[fqdn, n, rdata, ttl, ts, loc] = str.substring(1).split(':')
-      if (n != 33) throw new Error('SRV fromTinydns: invalid n')
+      if (n != 33) this.throwHelp('SRV fromTinydns: invalid n')
 
       pri = TINYDNS.octalToUInt16(rdata.substring(0, 8))
       weight = TINYDNS.octalToUInt16(rdata.substring(8, 16))

package/rr/sshfp.js

@@ -45,7 +45,7 @@ export default class SSHFP extends RR {
   fromTinydns(opts) {
     // SSHFP via generic, :fqdn:n:rdata:ttl:timestamp:lo
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 44) throw new Error('SSHFP fromTinydns, invalid n')
+    if (n != 44) this.throwHelp('SSHFP fromTinydns, invalid n')
 
     return new SSHFP({
       owner: this.fullyQualify(fqdn),

package/rr/svcb.js

@@ -0,0 +1,64 @@
+import RR from '../rr.js'
+
+export default class SVCB extends RR {
+  constructor(opts) {
+    super(opts)
+  }
+
+  /****** Resource record specific setters   *******/
+  setPriority(val) {
+    this.is16bitInt('SVCB', 'priority', val)
+
+    this.set('priority', val)
+  }
+
+  setTargetName(val) {
+    // this.isFullyQualified('SVCB', 'target name', val)
+    // this.isValidHostname('SVCB', 'target name', val)
+
+    // RFC 4034: letters in the DNS names are lower cased
+    this.set('target name', val.toLowerCase())
+  }
+
+  setParams(val) {
+    // if (!val) throw new Error(`SVCB: params is required`)
+
+    this.set('params', val)
+  }
+
+  getDescription() {
+    return 'Service Binding'
+  }
+
+  getRdataFields(arg) {
+    return ['priority', 'target name', 'params']
+  }
+
+  getRFCs() {
+    return [9460]
+  }
+
+  getTypeId() {
+    return 64
+  }
+
+  /******  IMPORTERS   *******/
+
+  fromBind(opts) {
+    // test.example.com  3600  IN  SVCB Priority TargetName Params
+    // _8443._foo.api.example.com. 7200 IN SVCB 0 svc4.example.net.
+    // svc4.example.net.  7200  IN SVCB 3 svc4.example.net. ( alpn="bar" port="8004" )
+    const [owner, ttl, c, type, pri, fqdn] = opts.bindline.split(/\s+/)
+    return new SVCB({
+      owner,
+      ttl: parseInt(ttl, 10),
+      class: c,
+      type,
+      priority: parseInt(pri, 10),
+      'target name': fqdn,
+      params: opts.bindline.split(/\s+/).slice(6).join(' ').trim(),
+    })
+  }
+
+  /******  EXPORTERS   *******/
+}

package/rr/tlsa.js

@@ -10,21 +10,19 @@ export default class TLSA extends RR {
   /****** Resource record specific setters   *******/
   setCertificateUsage(val) {
     if (![0, 1, 2, 3].includes(val))
-      throw new Error(`TLSA: certificate usage invalid, ${this.citeRFC()}`)
+      this.throwHelp(`TLSA: certificate usage invalid`)
 
     this.set('certificate usage', val)
   }
 
   setSelector(val) {
-    if (![0, 1].includes(val))
-      throw new Error(`TLSA: selector invalid, ${this.citeRFC()}`)
+    if (![0, 1].includes(val)) this.throwHelp(`TLSA: selector invalid`)
 
     this.set('selector', val)
   }
 
   setMatchingType(val) {
-    if (![0, 1, 2].includes(val))
-      throw new Error(`TLSA: matching type, ${this.citeRFC()}`)
+    if (![0, 1, 2].includes(val)) this.throwHelp(`TLSA: matching type`)
 
     this.set('matching type', val)
   }
@@ -62,10 +60,12 @@ export default class TLSA extends RR {
 
   fromBind(opts) {
     // test.example.com  3600  IN  TLSA, usage, selector, match, data
-    const match = opts.bindline.split(
-      /^([^\s]+)\s+([0-9]+)\s+(\w+)\s+(\w+)\s+([0-9]+)\s+([0-9]+)\s+([0-9]+)\s+(.*?)\s*$/,
-    )
-    if (!match) throw new Error(`unable to parse TLSA: ${opts.bindline}`)
+    const match = opts.bindline
+      .trim()
+      .split(
+        /^([^\s]+)\s+([0-9]{1,10})\s+(IN)\s+(TLSA)\s+([0-9]+)\s+([0-9]+)\s+([0-9]+)\s+(.*?)$/,
+      )
+    if (!match) this.throwHelp(`unable to parse TLSA: ${opts.bindline}`)
     const [owner, ttl, c, type, usage, selector, matchtype, cad] =
       match.slice(1)
     return new TLSA({
@@ -82,7 +82,7 @@ export default class TLSA extends RR {
 
   fromTinydns(opts) {
     const [fqdn, n, rdata, ttl, ts, loc] = opts.tinyline.substring(1).split(':')
-    if (n != 52) throw new Error('TLSA fromTinydns, invalid n')
+    if (n != 52) this.throwHelp('TLSA fromTinydns, invalid n')
 
     const bytes = Buffer.from(TINYDNS.octalToChar(rdata), 'binary')